[TLS] relax certificate_list requirements - opinion call (was Re: [tls13-spec] relax certificate_list ordering requirements to match current practice (#169))

[Dave Garrett <[e-mail]>]

https://github.com/tlswg/tls13-spec/pull/169/files

Of note, see also:
https://www.ietf.org/mail-archive/web/tls/current/msg16238.html

The discussion on this list got quite long and at least one person changed their opinion on the topic. I'd like to figure out where we stand on this now.

The primary people advocating for this are myself and Ryan Sleevi.
The primary person advocating against this is Martin Rex.

Who else is in favor or against, at the moment?

Regardless of your opinion, is there anything else that needs to be added to the changeset?
(If you think this is problematic, what needs to be added to reduce that?)

Also, the topic of AIA cert fetching came up, with people both arguing for and against. Personally, I don't think cert chain verification should be triggering any network activity unless explicitly approved beforehand. Do we need to add a note of some kind with regard to this topic? Could we make OCSP stapling a requirement in some way to at least address that? In an ideal world, I'd prefer either the server sends 100% of what's needed to verify, or the handshake should fail. (this is beginning to get off-topic from the main issue, though)

Don't interpret this as a full vote or consensus call just yet. I'm just trying to assess what needs to be discussed to move forward on the topic in some way.


Dave